Change File encryption on mobile device from Not Configured to On. You can select Remediate noncompliant settings to force Encryption on devices that support that feature. I change Noncompliance severity for reports to Critical.

Under the Supported Platforms screen, uncheck Select All and then only select Windows Phone 8.1.

The following page is the Platform Applicability. If any settings are not supported by all platforms, they will be listed on the following screen. Encryption is supported on Windows Phone 8.1, so nothing to show here. I just clicked Next.

Create and Deploy Configuration Baseline

Enter a Name: All Windows Phone 8.1 Encryption Baseline and Description is desired.

From the Configuration Data section, click on Add and Choose Configuration Items.

Select All Windows Phone 8.1 Encryption Policy Configuration Item that was created in the previous step and Click Add then OK. You can add multiple Configuration Items if desired.

Now that the Configuration Baseline is created, the next step is to deploy the Baseline to a Collection.

Right Click Configuration Baseline and Select Deploy. You can select multiple options for Remediation and Generating an Alert. I choose All Windows InTune Users Collection and a Simple Schedule to Run Every 4 Hours.

Click OK to Complete the Deployment.

Monitoring Baseline Deployment

There are multiple ways to monitor and report on the Encryption Status of the devices in our Deployment. Navigate to Monitoring Node in Configuration Manager Console. From here, we can utilize Alerts Node, Reporting Node and Deployments Node to monitor and track Encryption Status of the devices.

Here are screenshot from the Deployment Status:

Each Deployment Status will show Compliant, Error (if a Configuration Item does not apply), Non-Compliant and Unknown (if a device has not gotten the policy).

This screen shows that Andrew's Windows Phone is Encrypted and therefore Compliant.

The Non-Compliant Tab shows that Dawn and Madison's Windows Phones are not Encrypted and therefore Non-Compliant.

There are also 17 Built-In Compliance and Settings Reports.

And finally, we have Alerts that can be configured when deploying each Baseline.

This concludes a high-level overview of how to monitor the Encryption Status (or any other Mobile Device Setting).